Skip to main content

Favicon Matcher

The Favicon Matcher finds hosts that share the same favicon. This is useful to identify related infrastructure, detect phishing pages that copied your favicon, or track services using the same software.

How to use it?

There are two ways to search:

By hash

If you already have a favicon MMH3 hash (e.g. 2087839499), enter it directly in the search bar. The tool will return all the favicons in the database that match or are similar.

By domain

Enter a domain (e.g. apple.com, ubuntu.com). A wildcard works too (*.apple.com) but is optional. The tool will extract the favicons from the matching hosts and display them as a picker. You can then select one or more favicons (up to 7) and search for other hosts using the same icons.

tip

You can also search for a favicon hash directly from the hosts search using the favicon_hash field, e.g. favicon_hash:"2087839499".

What can I use it for?

  • Find sites that copied your favicon to impersonate you.
  • Different domains running the same application often share a favicon, which helps map related infrastructure.
  • Default favicons can reveal the software behind a host: a specific CMS, admin panel, or appliance.

How many credits does it cost?

An account is required to use this tool. A favicon search spends 5 credits (see Credits). The favicon picker used to select an image is free.

Free users see only the first few matches clearly. Full results need a paid plan (Professional or Enterprise), or a Free account with purchased credits.